Claude Code and SOC 2: The Evidence Your Auditor Wants
Engineers run Claude Code and the auditor wants proof. The managed settings that work as controls, the SOC 2 criteria they support, and the evidence to give.
Writing · Tag
Posts tagged founders
38 posts on founders, page 1 of 4. Or browse the full writing index →
Posts tagged founders
Who Buys Anything When Robots Do the Work?
If robots do the work and nobody earns, who buys? I think the economy dies slowly and the company store fills the gap. That's where I think it goes.
Why I Doubt UBI Is Coming
Tax all US output at 100% and it comes to about $95,000 a person a year. Why I doubt UBI arrives, and think robots become the measure of wealth.
Narrow Front Door, Visible Back Rooms
Going fractional? Get in the door with one narrow problem, then make the rest of your work easy to find, because the engineers who find you pull you into more.
Your Personal Brand Is an Attack Surface
Every talk, bio, and commit you publish to build a name is also recon and impersonation fuel. A vCISO's founder-scale checklist for hardening your identity.
Omarchy on a Company Laptop: The SOC 2 Verdict
An engineer wants to run Omarchy on a company laptop. Here's the verdict a security lead signs off on, control by control, for a SOC 2 Type II shop.
I Graded My Blog Against a 2014 Marketing Course
I graded my own site against a 2014 developer-marketing course. It was right about the two things I skipped, dated on platforms, and silent on AI answers.
How to Actually Make Money With AI in 2026: An Engineer Ranks 13 Side Hustles
An engineer who builds AI systems ranks 13 ways to make money with AI in 2026 by ceiling, moat, time to first dollar, and fulfillment burden.
Model Routers Are Vendors. Review Them Like One.
PRC labs harvested their own users' sessions, many arriving via third-party model routers. The fix is treating the router as a vendor.
Anthropic's Extreme Scenario Has a Precondition
Anthropic published an economic upside scenario and an alignment risk admission the same week. The upside needs the thing nobody has a plan for.
Agents Don't Need Prompts. They Need Managers.
Agents stop before the work is done, not because the model is lazy but because nobody built the management system a human employee gets for free.
The Agent Evidence Pack for a Security Review
The two documents an enterprise reviewer wants for your AI agent, the allow-list and the tool-call log, specified field by field and generated from code.